Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87849b3a9cbb45397d154a68db4f01165de22acb.cer
File:                     87849b3a9cbb45397d154a68db4f01165de22acb.cer (raw, json)
Hash identifier:          3ssPvTCYjjoiWpSAVcjzZojErNZYVJfKtbnJgmx0RXo=
Subject key identifier:   F0:C7:DB:68:F3:54:0D:E0:E8:E7:C1:C5:04:F4:ED:33:08:AF:AB:F1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E28AE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/87849b3a9cbb45397d154a68db4f01165de22acb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:31 +0000
Certificate not after:    Sun 07 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 52278
                          IP: 190.105.240.0/20
                          IP: 2803:e990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14846690 (0xe28ae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:31 2017 GMT
            Not After : Jul  7 06:00:00 2024 GMT
        Subject: CN=87849b3a9cbb45397d154a68db4f01165de22acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:05:41:07:9d:58:93:4b:b6:47:f2:55:2b:
                    b2:38:4c:46:56:ba:c6:06:f0:d5:a2:cf:f1:bc:78:
                    b2:57:be:3a:c6:2b:55:63:ab:ee:ba:65:53:3f:7e:
                    cc:91:10:a6:cf:09:1f:c9:8e:2d:ac:41:29:09:db:
                    4e:37:74:3d:6f:9e:7b:3d:f6:2b:c5:ed:5f:48:77:
                    1d:21:5a:af:60:c7:91:56:a2:91:cc:3e:90:f5:64:
                    f5:31:02:1f:b8:a9:46:9e:b9:45:f5:20:e8:50:11:
                    3d:cb:0f:b6:0c:06:22:0f:6b:33:b2:e2:1b:85:3f:
                    44:42:c5:a3:10:11:84:0f:66:63:19:95:26:ce:ad:
                    eb:49:16:54:a8:0d:ca:23:f6:d7:41:41:2e:1b:8d:
                    5c:85:cc:35:c5:13:f2:56:11:00:9f:c3:65:34:12:
                    03:8c:f3:75:6d:b9:f6:6f:26:40:21:cb:ca:5e:66:
                    93:75:ca:60:22:bd:8c:fd:e3:90:e9:a8:26:09:ef:
                    32:f5:1d:7b:ff:40:90:c2:7b:c8:60:8d:95:e8:4f:
                    8c:17:57:23:70:9a:40:a6:23:8d:48:bc:6a:12:f0:
                    5f:4a:18:d4:44:dc:a7:87:9a:5f:3e:de:8d:b1:38:
                    a6:de:50:f6:74:df:d3:b3:1d:ae:e3:1b:e6:73:a9:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C7:DB:68:F3:54:0D:E0:E8:E7:C1:C5:04:F4:ED:33:08:AF:AB:F1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a5cf04f1-4e91-40be-b76d-e6a47e3b7692/87849b3a9cbb45397d154a68db4f01165de22acb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.240.0/20
                IPv6:
                  2803:e990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52278

    Signature Algorithm: sha256WithRSAEncryption
         81:de:ae:78:fe:d8:9f:14:f0:11:90:9c:5f:5b:90:67:b2:50:
         91:d8:43:75:3b:25:5a:76:26:61:18:3e:a1:e7:8a:9f:70:4b:
         e7:1c:6c:44:ff:6d:f9:d1:d1:d1:81:1e:50:e7:ab:29:02:16:
         17:9d:96:1f:4b:31:64:22:a4:a7:0a:20:e1:1a:c7:9d:c1:96:
         fb:3e:aa:1b:df:b2:77:15:96:ae:6e:38:cc:d5:77:25:f9:b8:
         53:8e:1f:45:ad:7f:10:29:8c:ea:ec:19:db:25:c8:cf:5d:c2:
         c3:03:fb:bc:fd:3a:1a:39:4d:a4:4e:5e:7e:59:e9:88:fd:f9:
         43:f2:92:96:14:a7:0d:b8:21:b6:e6:ed:3d:8b:c4:fd:3a:4f:
         af:cb:56:d7:37:0e:98:be:54:3a:fe:9f:d1:a0:4a:ae:ac:e7:
         7e:83:49:96:4a:12:d9:bd:7f:51:bc:72:08:e0:a1:73:8a:21:
         fe:76:fe:67:c5:82:eb:c1:3a:13:b6:0a:c6:95:a6:89:c2:e8:
         2a:36:f8:d8:c6:7b:51:89:1d:3d:0f:23:11:a4:07:37:86:4f:
         26:12:0b:dc:b5:e8:17:d7:3b:dd:b5:12:90:77:73:a0:07:30:
         11:04:26:ad:77:16:43:c0:b7:8b:67:25:30:0e:cf:7a:e1:36:
         b4:ba:7e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----